Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa
File:                     e775eb4e-3934-39be-87d4-14ab90687fd1.roa (raw, json)
Hash identifier:          DS0AvnsDq3qEGacqkTB+lgMm3yrxk2jt9c9KZgSp/Gg=
Subject key identifier:   5A:06:1D:C9:D4:32:76:35:61:0A:81:84:E5:1B:3A:9E:5E:A3:FB:69
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A485952B6963A4A1A781F580
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa
Signing time:             Thu 23 Jan 2025 18:28:37 +0000
ROA not before:           Thu 23 Jan 2025 18:28:37 +0000
ROA not after:            Wed 23 Apr 2025 17:28:37 +0000
asID:                     15164
IP address blocks:        138.199.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:85:95:2b:69:63:a4:a1:a7:81:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 23 18:28:37 2025 GMT
            Not After : Apr 23 17:28:37 2025 GMT
        Subject: CN=11f2f5a8-4d1e-4372-9612-5ae3cba31bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c8:71:fb:e9:d2:34:ed:6d:65:db:46:4b:8e:
                    2f:cb:64:14:aa:0a:6d:0a:c8:28:53:30:01:0b:d6:
                    c6:7b:67:17:f2:ef:7b:4e:21:fe:c6:b1:3b:67:b0:
                    eb:2c:b5:7c:98:5b:c5:35:93:1f:e8:1f:5b:ee:50:
                    1a:7e:bb:e5:d9:fc:cc:e7:45:2e:1e:45:0c:01:60:
                    27:23:8d:f2:59:80:c1:42:53:44:0c:42:0e:fa:bc:
                    f8:57:50:f9:69:67:2c:6c:70:0f:bd:4a:7c:a9:95:
                    19:f2:db:77:d2:da:c9:b5:6d:c8:30:1a:e0:ca:9e:
                    8a:33:c9:6b:76:c9:b5:39:eb:9e:fa:0d:ce:70:95:
                    a4:8a:51:e5:9a:e8:a1:5b:91:fc:4c:d1:80:45:4b:
                    bb:61:b9:ba:57:61:e8:58:fd:1e:ed:1c:a8:ef:cb:
                    ca:ce:be:09:af:3d:63:4a:47:d5:7c:55:72:27:b8:
                    52:c8:93:66:a8:4c:08:0a:37:60:ce:ee:29:b2:21:
                    05:22:f0:e4:97:82:f1:a3:1d:5a:2d:ef:a4:e7:de:
                    95:96:01:e5:c2:92:07:7e:76:b0:15:50:88:80:c8:
                    af:2c:03:62:f8:ad:85:ed:59:e5:67:eb:d3:3a:62:
                    15:0d:09:65:9b:26:1c:7b:2d:52:af:ff:b6:a9:2b:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:1D:C9:D4:32:76:35:61:0A:81:84:E5:1B:3A:9E:5E:A3:FB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.199.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:47:87:af:eb:2e:ec:43:bd:36:8e:7f:59:09:d7:d9:e3:
         59:22:99:72:91:b5:47:31:6c:03:ff:c1:9d:c2:69:52:de:e5:
         a0:83:62:cd:1a:ac:5a:36:1a:ba:5d:e2:64:1b:0d:1b:2a:e6:
         da:c7:52:35:7a:6a:f2:2f:08:96:96:d1:90:8a:77:fd:7f:e0:
         6c:6f:22:36:21:ef:d6:3f:42:f5:22:28:45:ab:80:56:a2:0b:
         2e:f6:22:ef:07:dc:66:84:5b:81:c2:4b:ee:52:f2:61:13:eb:
         26:1a:13:11:c7:c2:30:b9:99:8e:ca:2d:9f:4a:26:91:68:85:
         18:b3:b1:38:81:a6:6a:cf:f6:5d:ca:47:7f:f4:49:b2:d1:05:
         cc:be:8d:7c:d3:d3:47:37:81:4e:39:0f:19:e0:6f:36:c3:17:
         c1:a4:4e:da:c4:e2:85:18:68:ce:d9:bb:38:e7:a5:48:c1:c6:
         26:2d:98:e8:8f:7f:5e:74:a7:c8:f8:6c:4c:5e:23:18:f2:52:
         31:ef:53:98:1b:f0:14:da:99:e1:cc:06:bb:74:a4:e9:e4:fd:
         d4:b7:89:dd:7e:83:ac:ed:f3:e0:76:c1:7f:7a:28:23:46:71:
         31:e1:39:8d:42:f1:3f:a8:a9:f1:3d:4e:b7:47:da:94:9b:a2:
         72:98:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:44 2025 by rpki-client